Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7c4e3722-8ad8-3690-a702-11ba400d1f5f.roa
File:                     7c4e3722-8ad8-3690-a702-11ba400d1f5f.roa (raw, json)
Hash identifier:          gTNa36BnRODjX877kKwydLeuMjEYI+/C13bsw+4jWhI=
Subject key identifier:   7D:73:7E:6A:D0:F5:C4:AE:CA:C1:95:D1:D7:C7:0E:E7:6A:28:E7:5B
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A9900C13631B726BBF28D9F60
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7c4e3722-8ad8-3690-a702-11ba400d1f5f.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     397422
IP address blocks:        209.237.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c1:36:31:b7:26:bb:f2:8d:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=eb52e18a-4b8e-4b7b-bfc3-f3e98c9e87bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:70:77:67:2e:51:e8:9e:71:63:cc:38:44:4a:
                    f8:ed:d1:a2:12:49:81:98:3f:85:ed:21:3d:48:03:
                    c5:59:a0:63:6a:08:e4:04:e4:7b:c8:d2:00:d3:ac:
                    a9:fd:91:23:ad:d7:e4:f4:cb:95:69:fd:88:3a:13:
                    86:d6:e6:85:11:98:c3:53:b7:43:d2:28:f7:db:34:
                    20:5f:5c:d1:c8:79:3a:d1:d0:35:f0:ae:76:ed:f1:
                    8b:a7:36:7c:0d:b3:a7:7f:90:d1:ef:a0:e8:ab:cc:
                    51:a3:72:df:5a:da:0b:68:a6:62:a5:68:91:61:c8:
                    83:2e:98:04:ba:d2:68:80:bb:40:ae:3b:ae:59:9a:
                    9a:80:33:06:30:9d:36:c3:16:b2:5d:ef:e4:f3:31:
                    5f:87:ac:a4:7f:ef:c0:49:a9:0f:5e:8a:f9:c9:28:
                    56:c0:8a:9b:e6:98:2f:24:ad:f4:85:3b:dd:a4:16:
                    79:19:00:fe:69:38:dc:a1:ba:0c:43:06:74:bc:eb:
                    e0:33:a4:7e:99:9c:5a:7b:2c:b0:63:e9:32:c0:ae:
                    01:26:76:3f:81:46:b5:65:a1:d7:04:3e:e2:7b:29:
                    4c:a3:ca:93:35:e4:79:32:a1:9d:42:a2:4f:2e:db:
                    57:ce:88:a9:73:f0:2c:4b:66:bd:70:ab:9b:d3:d0:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:73:7E:6A:D0:F5:C4:AE:CA:C1:95:D1:D7:C7:0E:E7:6A:28:E7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7c4e3722-8ad8-3690-a702-11ba400d1f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:5c:55:5e:16:83:b8:d1:d4:bf:fe:0d:b6:4c:7d:ec:45:
         86:39:c5:b2:86:64:8f:52:71:51:b7:83:32:21:4b:eb:3e:81:
         a0:f2:9c:f5:cc:e3:10:32:72:59:88:9d:87:bb:c5:6b:bd:e0:
         e1:6f:9e:91:e9:10:0e:e8:9b:ae:18:7c:03:37:e7:78:c4:d1:
         48:ef:28:4f:00:29:d7:2e:58:cc:05:6b:d7:82:11:f7:23:19:
         cc:1b:d3:6e:77:40:30:f6:d0:de:c0:a3:cd:ef:7a:33:23:d0:
         c9:fc:cf:c8:0f:d0:65:69:8a:8e:6f:9b:c7:b9:c0:08:95:9e:
         44:cf:d3:ec:b2:71:ea:62:7d:b7:fd:44:b6:21:10:5c:27:b4:
         70:5a:1b:85:d0:29:3a:e4:df:e6:b6:8a:73:51:24:a2:2a:28:
         96:20:7a:e8:f0:b4:ab:3a:9a:98:27:4a:20:32:5e:98:1b:6e:
         9b:96:59:fe:99:53:99:92:06:5c:8d:d7:c0:4f:e3:33:a8:21:
         fa:69:4f:f1:b3:4e:1d:de:ef:8a:2a:d8:92:82:ca:0a:02:d9:
         77:e2:c3:0d:31:15:11:46:08:3e:c3:bd:19:d4:95:a4:93:01:
         9c:1b:88:e8:f7:e7:8a:88:f2:46:18:88:bd:2b:60:64:b4:5a:
         94:1b:f3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:34 2025 by rpki-client